Skip to content
OpenAdvisories

Archive

5 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /5 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-7595 Public exploit

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network…

    IETF RFC2784 - Generic Routing Encapsulation (GRE)
  • Medium 4.3
    CVE-2025-23419 Public exploit

    TLS Session Resumption Vulnerability

    When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://ngin…

    F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2025-20029 Public exploit

    BIG-IP iControl REST and tmsh vulnerability

    Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are n…

    F5 BIG-IP Network devices
  • Critical 9.1
    CVE-2025-20125 Public exploit EPSS 16%

    Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability

    A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and restart the node. This vulnerability is due to a lack of authorization in a …

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  • Critical 9.9
    CVE-2025-20124 Public exploit EPSS 19%

    Cisco Identity Services Engine Java Deserialization Vulnerability

    A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. This vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices